Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
File:                     Rs-nB5wUOhftWQJiuseGj8vIQro.cer (raw, json)
Hash identifier:          H5lMyPC2raFrJS33jHIjzCls93ZplyJBfLyUufLGJG0=
Subject key identifier:   46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701CAEB7506589B89894905B60CD1A25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:33:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.112.0/24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 09:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1c:ae:b7:50:65:89:b8:98:94:90:5b:60:cd:1a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:33:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46cfa7079c143a17ed590262bac7868fcbc842ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:58:5c:03:64:10:3b:a3:53:c9:88:c3:b6:
                    a1:2c:57:79:f9:95:6e:1b:10:0d:30:71:3e:35:c2:
                    d8:9d:f7:4a:43:01:51:39:bd:26:c6:c6:60:58:67:
                    96:b4:87:a6:49:3a:93:7a:e9:11:96:10:42:24:d0:
                    ec:7e:14:19:62:f8:07:03:9a:de:e3:d4:c1:4b:ec:
                    66:e1:cd:79:d9:8e:50:96:6a:61:4f:75:83:fb:71:
                    9d:07:a4:22:29:ef:db:b6:65:58:c4:25:8f:1f:f4:
                    4d:43:16:fa:87:7b:db:41:cf:21:1b:cd:d6:eb:ac:
                    96:80:96:4d:b6:4d:96:f4:25:0e:89:90:bd:5b:de:
                    76:94:f4:07:f1:b4:86:5e:66:32:77:11:ee:08:c1:
                    ec:05:42:aa:26:58:3c:f8:80:c6:ae:cd:4e:94:e1:
                    57:76:e7:ae:2b:06:8a:58:02:75:59:db:7d:a8:d0:
                    96:b7:7a:db:52:93:31:82:d3:26:81:a1:97:3e:f0:
                    ac:bc:08:d5:9a:1c:73:b1:f5:e1:b7:be:fe:df:62:
                    60:2d:39:f0:1d:17:08:19:b1:d3:53:ea:4e:d4:41:
                    94:7a:5b:3e:6c:b7:60:92:ed:5a:17:14:cb:49:3d:
                    86:38:df:f4:48:a2:1e:95:d5:55:d7:52:7e:a9:a5:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:87:12:2d:7c:0a:45:b5:df:fd:9a:b2:89:06:2a:1e:58:e9:
         c8:77:70:0d:ad:ed:3b:ed:8f:7c:4e:96:1d:ce:63:9a:68:28:
         82:b9:f9:71:de:d2:ab:3f:85:a4:f7:87:b2:ed:77:05:7a:33:
         59:56:7c:3c:10:ca:83:2c:8f:eb:81:db:5b:03:2b:2f:7d:38:
         c7:69:41:b0:a3:01:2b:5e:49:c8:25:78:1f:d9:bc:97:4d:d1:
         26:36:8d:27:7a:95:3b:69:43:22:63:f2:a1:4d:e7:55:6b:d4:
         8c:55:ec:bb:95:15:6a:c8:20:bc:15:c9:7d:56:62:b2:0a:c4:
         d2:66:5d:28:42:3c:c8:68:1d:6d:da:4f:5e:19:f6:ed:bb:bf:
         42:02:a4:ae:dd:36:6c:5f:5d:b6:48:18:dc:c0:3f:1c:51:f4:
         78:9e:9a:00:f7:c6:ae:83:b2:56:cf:d1:f3:ca:de:5d:90:a2:
         5c:de:e8:47:94:ff:a5:71:72:75:29:24:41:46:71:06:9f:a6:
         06:39:83:03:ad:24:b9:4c:05:13:9e:55:e6:fb:e7:d9:c7:8a:
         a0:1b:13:d0:64:e8:69:7d:8e:8b:20:d4:78:5e:83:42:e2:bf:
         4d:7f:6a:ab:73:98:20:57:b3:68:14:4e:a0:3d:a6:22:52:48:
         dc:61:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----